Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/AJMAYaFZOW6c3HQS1_71MU9xvhw.roa
File: AJMAYaFZOW6c3HQS1_71MU9xvhw.roa (raw, json)
Hash identifier: kSpQsd/CtkTwEJMhS1xYgQ7NffPQPjASz3KG7h3lzZg=
Subject key identifier: 00:93:00:61:A1:59:39:6E:9C:DC:74:12:D7:FE:F5:31:4F:71:BE:1C
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019570B6C0C71977188506AFD4E85BD46EAD
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/AJMAYaFZOW6c3HQS1_71MU9xvhw.roa
Signing time: Fri 07 Mar 2025 13:06:19 +0000
ROA not before: Fri 07 Mar 2025 13:06:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.65.114.0/24 maxlen: 24
188.209.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 13:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:b6:c0:c7:19:77:18:85:06:af:d4:e8:5b:d4:6e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 7 13:06:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00930061a159396e9cdc7412d7fef5314f71be1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:4c:7b:b7:44:93:84:55:86:f1:e0:23:fb:
2e:32:9d:34:bd:d2:d0:5a:71:ee:fa:e1:44:5b:b1:
10:be:27:a2:12:37:aa:c4:88:d7:f0:2d:6c:a8:b9:
ab:7a:d3:25:f9:9f:b1:9f:a0:96:e5:b7:8e:22:94:
18:c4:20:4c:46:af:54:3d:18:84:cc:c9:69:3b:64:
3f:e5:19:bf:58:c1:5d:76:9d:97:2d:46:b5:9a:0e:
7f:6c:04:6c:b9:9c:f4:c1:26:ad:d8:28:fc:d8:8d:
52:a9:58:6a:24:8d:38:4b:39:be:74:11:bd:4c:e6:
a0:f1:bd:ed:25:b5:77:e6:94:26:d7:aa:08:a5:eb:
4b:3b:5e:30:0a:43:56:6a:c0:1b:13:3b:95:01:71:
d9:61:35:ac:8b:24:5b:c8:b2:db:f3:5b:c4:15:36:
3d:f3:ac:c9:d0:24:ac:6a:b4:c6:d8:49:ff:c7:d1:
4f:76:4c:d1:4f:29:20:05:b8:a3:61:f0:a4:c0:9b:
e6:49:5b:63:b6:cf:f2:47:49:27:b1:17:17:55:1c:
fe:2f:0e:0d:87:3a:d2:22:a1:9d:fe:66:5f:a7:c5:
41:36:bb:17:36:a3:85:a4:d8:71:eb:80:e9:e5:53:
76:15:f5:37:81:43:34:1c:6f:c5:db:16:6f:c8:5d:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:93:00:61:A1:59:39:6E:9C:DC:74:12:D7:FE:F5:31:4F:71:BE:1C
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/AJMAYaFZOW6c3HQS1_71MU9xvhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
188.209.134.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:aa:c8:d2:75:0e:96:fc:2b:bf:00:ef:93:c0:2e:48:da:c7:
30:4d:5a:15:91:da:d8:22:0e:78:e2:f0:82:f1:b1:c1:09:1b:
0c:28:9b:dd:0a:1d:2c:99:d8:a6:0d:83:a3:6a:5c:32:df:95:
45:2b:a7:42:b5:2a:be:69:22:fd:db:13:5e:6a:72:62:ae:67:
e3:e8:cb:24:1b:2d:63:4a:57:2c:61:6c:fd:dd:a7:bf:67:ec:
c1:6a:01:22:5b:59:15:fa:1d:d1:2a:35:16:ed:32:9d:5d:83:
61:99:5a:a7:30:51:ce:b9:29:81:5a:b4:a7:59:99:a2:eb:09:
25:01:76:b9:a0:c0:4d:2f:97:9e:fd:1f:c6:c7:c1:f7:ea:3f:
05:9d:59:e2:67:a2:b1:ea:3f:b6:ab:44:e8:4c:d9:ce:4c:52:
b4:3b:26:1c:fa:28:e3:47:62:cd:bb:73:cf:2c:d0:bf:18:6c:
4a:1d:82:92:42:e2:c1:19:f3:f8:5f:8a:3b:03:2b:f5:ea:ab:
23:b7:15:0f:d3:19:cf:c8:b0:a0:ef:45:f5:a2:33:08:cd:96:
79:f6:9d:7d:47:35:07:6c:70:51:50:f9:a3:c1:dc:64:39:0c:
9b:f7:03:b7:66:fc:fb:0a:34:23:0a:f6:fe:d5:7c:2c:e9:76:
fc:a0:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:28 2025 by rpki-client